CCPA Privacy

Last Updated: April 15, 2026 | Effective Date: April 15, 2026

This Privacy Notice for California Residents (“Notice”) supplements the information contained in the LocalHomePro Privacy Policy and applies solely to consumers who are residents of the State of California (“Consumers,” and in this Notice, “you” and “your”). StoyMedia LLC (“LocalHomePro,” “we,” “us,” or “our”) has adopted this Notice in compliance with the California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act of 2020 (“CPRA”) and their implementing regulations. Any terms defined in the CCPA or CPRA have the same meaning when used in this Notice.

COLLECTION OF PERSONAL INFORMATION

We collect personal information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with an individual Consumer, household, or device (“personal information”). We have collected the following categories of personal information from Consumers within the last twelve (12) months. The following examples are taken directly from the CCPA. Where we indicate that a category is collected, we collect at least one of the example items from that category.

Category A — Identifiers Examples: A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, telephone number, or other similar identifiers. Collected: YES

Category B — Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) Examples: A name, postal address, telephone number. Some personal information in this category may overlap with other categories. Collected: YES

Category C — Protected classification characteristics under California or federal law Examples: Age (40 years or older), race, color, ancestry, national origin, citizenship, religion, marital status, medical condition, physical or mental disability, sex, sexual orientation, veteran or military status, genetic information. Collected: NO

Category D — Commercial information Examples: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies, including home services projects requested. Collected: YES

Category E — Biometric information Examples: Genetic, physiological, behavioral, and biological characteristics used to extract a template or identifier, such as fingerprints, faceprints, voiceprints, iris or retina scans. Collected: NO

Category F — Internet or other similar network activity Examples: Browsing history, search history, information on a Consumer’s interaction with a website, application, or advertisement. Collected: YES

Category G — Geolocation data Examples: Physical location or movements, including approximate location derived from IP address and home address as provided by the Consumer. Collected: YES

Category H — Sensory data Examples: Audio, electronic, visual, thermal, olfactory, or similar information. Collected: YES

Category I — Professional or employment-related information Examples: Current or past job history or performance evaluations. Collected: NO

Category J — Non-public education information Examples: Education records directly related to a student maintained by an educational institution. Collected: NO

Category K — Inferences drawn from other personal information Examples: Profiles reflecting a Consumer’s project interests, homeownership status, preferences, and contractor match quality. Collected: YES

Personal information does not include: publicly available information from government records; de-identified or aggregated Consumer information; or information excluded from the CCPA’s scope, including health or medical information covered by HIPAA, and information covered by the FCRA, GLBA, or the Driver’s Privacy Protection Act of 1994.

SOURCES OF PERSONAL INFORMATION

We obtain the categories of personal information listed above from the following categories of sources:

Directly from Consumers accessing our Site and submitting forms. For example, from lead submission forms completed by Consumers requesting home improvement contractor connections.

Directly and indirectly from activity on our Site. For example, from browser and device data, page interaction data, and usage details collected automatically through our platform and third-party technology partners.

From third-party advertising and analytics platforms. For example, from Meta (Facebook/Instagram) and Google when Consumers interact with our advertisements.

From call tracking platforms. For example, from CallRail, GoHighLevel, and/or Ringba when Consumers call tracking numbers displayed on our Site.

From third-party data brokers, aggregators, and affiliate marketing partners who provide us with information about potential leads. We do not currently purchase personal information from named third-party data brokers. If this practice changes, this Notice will be updated accordingly.

WEB TECHNOLOGY — CONSENT CERTIFICATION AND LEAD TRACKING

TrustedForm (ActiveProspect, Inc.). We use TrustedForm to independently document and certify Consumers’ consent to be contacted. The TrustedForm script is embedded on our lead submission forms and collects the following information when you interact with pages where the script is present: page URL, mouse movements and clicks, contact information inputted by the Consumer, a snapshot of the page, the Consumer’s IP address, time on page, date and time the TrustedForm script was loaded, date and time of user interactions with the page, and HTTP headers from the Consumer’s browser. This information is used solely for TCPA compliance verification and consent certification purposes. For more information about ActiveProspect’s data practices, visit activeprospect.com.

Jornaya (LeadiD). We may use Jornaya’s LeadiD script on our Site, which collects information including browser type, Internet service provider (ISP), referring and exit pages, platform type, date and time stamps, IP address, number of clicks, and records of user movements on the Site including visual snapshots of user activity. This information is combined with other aggregate data to issue a unique identifier for that site visit, which is used for lead authentication and TCPA compliance verification purposes. For more information about Jornaya’s data practices, visit jornaya.com.

SHARING AND SALE OF PERSONAL INFORMATION

Personal information we collect may be shared with service providers who perform certain services on our behalf, including CRM management, call tracking, website optimization, consent certification, advertising analytics, and other common technology services. Our contracts with these service providers require that they use Consumer information only in connection with the services they perform for us.

In the preceding twelve (12) months, we have disclosed the following categories of personal information to third-party service providers for a business purpose:

Category A: Identifiers Category B: California Customer Records personal information Category D: Commercial information Category F: Internet or other similar network activity Category G: Geolocation data Category H: Sensory data Category K: Inferences drawn from other personal information

We disclose Consumer personal information for business purposes to the following categories of third parties:

Our affiliates and marketing partners. Service providers, including GoHighLevel, LanderLab, CallRail, Ringba, Google, Meta, ActiveProspect (TrustedForm), and Jornaya. Third-Party Service Providers (contractors) to whom you authorize us to transmit your personal information when requesting home improvement services through our Site.

In the preceding twelve (12) months, we have sold the following categories of personal information to Third-Party Service Providers (contractors) and affiliated marketing partners:

Category A: Identifiers Category B: California Customer Records personal information Category D: Commercial information Category G: Geolocation data Category K: Inferences drawn from other personal information

YOUR CCPA AND CPRA RIGHTS

The CCPA and CPRA provide California residents with specific rights regarding their personal information. This section describes your rights and explains how to exercise them through a Verifiable Consumer Request.

“Verifiable Consumer Request” means a request that: is submitted to the contact information provided below; is made by you or your authorized representative; is made no more than twice within a twelve-month period; provides sufficient information for us to reasonably verify that you are the person about whom we collected personal information or an authorized representative; and describes your request with sufficient detail for us to properly understand, evaluate, and respond to it.

We are unable to respond to requests when we cannot verify your identity or authority to make the request. Personal information provided in a Verifiable Consumer Request will be used only to verify the requestor’s identity and to comply with the request. You are not required to create an account with us to submit a Verifiable Consumer Request.

Please note: personal information shared with or sold to Third-Party Service Providers (contractors) is subject to those contractors’ own privacy practices and Verifiable Consumer Request processes. Requests to delete or access personal information that has already been transmitted to a contractor should be submitted directly to that contractor.

RIGHT TO KNOW AND RIGHT TO DATA PORTABILITY

Upon receipt of a Verifiable Consumer Request, we will disclose to you:

The categories of personal information we collected about you. The categories of sources from which we collected your personal information. Our business or commercial purpose for collecting or selling your personal information. The categories of third parties with whom we shared your personal information. The specific pieces of personal information we collected about you (also referred to as a Data Portability Request). If we sold or disclosed your personal information for a business purpose: two separate lists disclosing (a) sales, identifying the categories of personal information that each category of recipient purchased; and (b) disclosures for a business purpose, identifying the categories of personal information that each category of recipient received.

Disclosures will cover the twelve (12) month period preceding receipt of your Verifiable Consumer Request. You may make a Verifiable Consumer Request for access or data portability no more than twice within a 12-month period.

RIGHT TO DELETION

You have the right to request that we delete any personal information we collected from you and retained, subject to certain exceptions. Upon receipt and confirmation of your Verifiable Consumer Request, we will delete your personal information from our records and direct our service providers to do the same, unless an exception applies.

We may deny a deletion request if retaining the information is necessary to: complete the transaction for which it was collected; detect security incidents or prevent fraudulent activity; comply with a legal obligation; enable solely internal uses reasonably aligned with your expectations; or for other purposes permitted under the CCPA and CPRA.

RIGHT TO CORRECT

You have the right to request that we correct inaccurate personal information we maintain about you. Upon verification of your identity and the claimed inaccuracy, we will correct the information and direct our service providers to do the same where feasible.

PERSONAL INFORMATION SALES OPT-OUT

You have the right to opt out of the sale or sharing of your personal information at any time. To exercise this right, submit an opt-out request by:

Visiting our Do Not Sell page: localhomepro.org/do-not-sell Emailing: support@stoymedia.com (subject line: “Do Not Sell My Personal Information”) Calling: (773) 217-0793

We will act on all opt-out requests within fifteen (15) days of receipt. We also honor Global Privacy Control (GPC) signals transmitted by your browser as a valid opt-out request.

You are not required to create an account with us to submit an opt-out request. Personal information provided in an opt-out request will be used only to verify your identity and to comply with the request.

RIGHT TO LIMIT USE OF SENSITIVE PERSONAL INFORMATION

LocalHomePro does not collect sensitive personal information as defined by the CPRA, including Social Security numbers, precise geolocation, financial account numbers, health or medical information, racial or ethnic origin, religious beliefs, or biometric data. Accordingly, no “Limit the Use of My Sensitive Personal Information” mechanism is required or provided.

NON-DISCRIMINATION

We will not discriminate against you for exercising any of your CCPA or CPRA rights. Unless permitted by the CCPA, we will not: deny you goods or services; charge you different prices or rates; provide you a different level or quality of goods or services; or suggest that you may receive a different price or quality of goods or services as a result of exercising your rights.

EXERCISING YOUR RIGHTS — HOW TO SUBMIT A VERIFIABLE CONSUMER REQUEST

To exercise your rights to Know, Delete, Correct, or obtain a portable copy of your personal information, submit a Verifiable Consumer Request by:

Web form: localhomepro.org/do-not-sell Email: support@stoymedia.com (subject line: “California Privacy Request”) Phone: (773) 217-0793

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a Verifiable Consumer Request related to your personal information.

RESPONSE TIMING AND FORMAT

We will respond to all Verifiable Consumer Requests within forty-five (45) days of receipt. If we require additional time (up to ninety (90) days total), we will notify you in writing before the 45-day deadline, stating the reason and the extended response date. We will deliver our response by email or mail at your option. We do not charge a fee to process or respond to a Verifiable Consumer Request unless it is excessive, repetitive, or manifestly unfounded.

SECURITY

We have implemented reasonable administrative, technical, and physical safeguards designed to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure. Data transmitted through our Site is protected using Transport Layer Security (TLS) encryption. However, no method of transmission or storage is 100% secure and we cannot guarantee absolute security.

MINORS

Our Site is not directed at individuals under the age of eighteen (18). We do not intentionally collect personal information from anyone under eighteen (18). If we learn that we have inadvertently done so, we will promptly delete it. We do not sell the personal information of Consumers we know to be under eighteen (18) years of age.

CONTACT INFORMATION

If you have questions or concerns about this Notice, our privacy practices, or wish to exercise your rights under California law, please contact us:

StoyMedia LLC Email: support@stoymedia.com Phone: (773) 217-0793 Website: localhomepro.org